EUVD-2025-53566

Malicious code in left-brown-mink npm...

EUVD-2025-55007

Malicious code in dear-purple-bobcat npm...

EUVD-2025-53506

Malicious code in liberal-red-aardwolf npm...

Malicious code in familiar-gold-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b50636bcd67ad6bc546a303dc183480157ce424d18f92ed70ee67b56fb3c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-turquoise-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299dde70db6b11a153493c31c76bbf7c4718642fb7cd89f8aaeabe3c263dce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-apricot-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7801d01cc977fdd15b061296513231aeb1f49980d83723abb61f981c487f04df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71010 Malicious code in sweet-amber-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083301a7d4e1e987d4d78a77ac69cebd9883ff43b3b2d5f79bf8d24ab36a56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67195 Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-aquamarine-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1dce1795ef6822632c8b1a6f52480502a6ae21f336db4a5ff6b1c52cde3eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared-lime-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f39a6ae7c405d9fe01c38b6cbfa1f38603faf74527dbcbf2481c54dd89edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-pink-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d659540f7080253831d43d732d9bd864ac2dedda2e2d12148cfeff1053b4f07f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52672

Malicious code in pregnant-indigo-swallow npm...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55301

Malicious code in comparable-gray-aardwolf npm...

MAL-2025-71791 Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-rose-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be861e10fa8f089f94ecd1b161b300831cbfe5abcc8887f8cabd798f567da9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jayo555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b4d31f2440a85660a47ae8569b7f3f2c6e74c717c84b12b1996be7223b2137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...